Ransomware Group intelligence

Orova

Active

Track Orova with 73 published victims and 3 known leak locations in a single intelligence view.

Victims 73 Known published victims in this dataset
First discovered 2026-08-04 Earliest victim discovery date
Last discovered 2026-08-11 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 46 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Orova is tracked by Breach House as a ransomware group with 73 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 1 Onion service Unknown mzlajyncb2rafn5bsb7esmo73kyawjxeirunba27n6nermmafzlcp4qd.onion
    Leak location 2 Onion service Unknown mll5ddmdzgiq2siv3qnocmmqyiigfpajtc663xtf32qtp6weycyx2hyd.onion
    Leak location 3 Onion service Unknown ns7y6bxawualjj5rpo5num6syejd7hgaowrndk3r4duxu2iyinzv6hid.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (73)

    Search, filter and paginate the victim timeline for Orova. Showing 1–73 of 73.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Ganzhou Xinye Craft Co., Ltd. id31572 View details Hong Kong Manufacturing / Engineering
    Ransomware Ganzhou Xinye Craft Co., Ltd. id31572 View details Hong Kong Manufacturing / Engineering
    Ransomware First Baptist Church of Belleview id31373 View details United States NGOs / Associations
    Ransomware First Baptist Church of Belleview id31373 View details United States NGOs / Associations
    Ransomware Hilliard's Air Conditioning & Heating Inc id31368 View details United States Construction / Real Estate
    Ransomware Hilliard's Air Conditioning & Heating Inc id31368 View details United States Construction / Real Estate
    Ransomware Gemstone UK id31369 View details United States Retail / E-commerce
    Ransomware Gemstone UK id31369 View details United States Retail / E-commerce
    Ransomware St Theresa Catholic Church id31358 View details United States Education
    Ransomware St Theresa Catholic Church id31358 View details United States Education
    Ransomware Stoneybrook West Master Association, Inc id31359 View details United States Construction / Real Estate
    Ransomware Stoneybrook West Master Association, Inc id31359 View details United States Construction / Real Estate
    Ransomware Stonecrest POA id31360 View details United States Construction / Real Estate
    Ransomware Stonecrest POA id31360 View details United States Construction / Real Estate
    Ransomware Magnolia Dental id31362 View details United States Healthcare / Medicine
    Ransomware Magnolia Dental id31362 View details United States Healthcare / Medicine
    Ransomware Country Oaks Veterinary Clinic id31363 View details United States Retail / E-commerce
    Ransomware Country Oaks Veterinary Clinic id31363 View details United States Retail / E-commerce
    Ransomware David King Architect id31364 View details United States Construction / Real Estate
    Ransomware David King Architect id31364 View details United States Construction / Real Estate
    Ransomware Woodside Ranch id31365 View details United States Construction / Real Estate
    Ransomware Woodside Ranch id31365 View details United States Construction / Real Estate
    Ransomware FixIT Tek id31246 View details United States IT
    Ransomware FixIT Tek id31246 View details United States IT
    Ransomware ADG Healthcare id31224 View details Egypt Healthcare / Pharma
    Ransomware ADG Healthcare id31224 View details Egypt Healthcare / Pharma
    Ransomware eSysTech id31225 View details Brazil IT
    Ransomware eSysTech id31225 View details Brazil IT
    Ransomware Northeastern Communications & Electrical id31226 View details United States Construction / Real Estate
    Ransomware Northeastern Communications & Electrical id31226 View details United States Construction / Real Estate
    Ransomware Apollo Office System id31227 View details Japan IT
    Ransomware Apollo Office System id31227 View details Japan IT
    Ransomware EMPYREAN INT’L TECHNO DEVICES id31228 View details Taiwan, Province of China IT
    Ransomware EMPYREAN INT’L TECHNO DEVICES id31228 View details Taiwan, Province of China IT
    Ransomware Texas Medical Screening id31229 View details United States Healthcare / Medicine
    Ransomware Texas Medical Screening id31229 View details United States Healthcare / Medicine
    Ransomware Sc Regional Housing Authority id31230 View details United States NGOs / Associations
    Ransomware Sc Regional Housing Authority id31230 View details United States NGOs / Associations
    Ransomware Bjs Insurance & Financial id31231 View details United States Finance / Legal / Insurance
    Ransomware Bjs Insurance & Financial id31231 View details United States Finance / Legal / Insurance
    Ransomware Wisdom Oral Surgery id31232 View details United States Healthcare / Medicine
    Ransomware Wisdom Oral Surgery id31232 View details United States Healthcare / Medicine
    Ransomware SURE TRAVEL COMPANY id31233 View details Hong Kong Transportation / Travel / Logistics
    Ransomware SURE TRAVEL COMPANY id31233 View details Hong Kong Transportation / Travel / Logistics
    Ransomware SURE TRAVEL COMPANY id31233 View details Hong Kong Transportation / Travel / Logistics
    Ransomware SBI Manufacturing id31208 View details United States Manufacturing / Engineering
    Ransomware SBI Manufacturing id31208 View details United States Manufacturing / Engineering
    Ransomware Agricultural Chemical Solutions id31209 View details United States Agriculture / Food
    Ransomware Agricultural Chemical Solutions id31209 View details United States Agriculture / Food
    Ransomware DBM Reflex id31210 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware DBM Reflex id31210 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Ultra Fame id31211 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Ultra Fame id31211 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Cardiology Associates id31212 View details United States Healthcare / Medicine
    Ransomware Cardiology Associates id31212 View details United States Healthcare / Medicine
    Ransomware Yost Home Improvements id31213 View details United States Construction / Real Estate
    Ransomware Yost Home Improvements id31213 View details United States Construction / Real Estate
    Ransomware KINGSSON id31214 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware KINGSSON id31214 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware SSI HOLDING (FAR EAST) LIMITED id31215 View details Hong Kong Other
    Ransomware SSI HOLDING (FAR EAST) LIMITED id31215 View details Hong Kong Other
    Ransomware Sanrio Hong Kong Co., Ltd id31216 View details Hong Kong Retail / E-commerce
    Ransomware Sanrio Hong Kong Co., Ltd id31216 View details Hong Kong Retail / E-commerce
    Ransomware Tat Fung Textile Co., Ltd. id31217 View details Hong Kong Manufacturing / Engineering
    Ransomware Tat Fung Textile Co., Ltd. id31217 View details Hong Kong Manufacturing / Engineering
    Ransomware Integrated Site Management id31218 View details United States Education
    Ransomware Integrated Site Management id31218 View details United States Education
    Ransomware Conceptual Designs, Inc. id31219 View details United States Construction / Real Estate
    Ransomware Conceptual Designs, Inc. id31219 View details United States Construction / Real Estate
    Ransomware JK Capital Management Limited id31220 View details Hong Kong Finance / Legal / Insurance
    Ransomware JK Capital Management Limited id31220 View details Hong Kong Finance / Legal / Insurance
    Ransomware Global Friction Products, Inc id31221 View details United States Manufacturing / Engineering
    Ransomware Global Friction Products, Inc id31221 View details United States Manufacturing / Engineering